Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/xleSadc6dRqQeXlnexreduKKlUs.roa
File:                     xleSadc6dRqQeXlnexreduKKlUs.roa (raw, json)
Hash identifier:          iZ5UJHQDxAgd3BEP8GWN1DQgwsWLPurpw9xc5NUhdTk=
Subject key identifier:   C6:57:92:69:D7:3A:75:1A:90:79:79:67:7B:1A:DE:76:E2:8A:95:4B
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1418
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/xleSadc6dRqQeXlnexreduKKlUs.roa
Signing time:             Tue 31 Mar 2026 07:56:51 +0000
ROA not before:           Tue 31 Mar 2026 07:56:51 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        1.75.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5144 (0x1418)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 07:56:51 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=C6579269D73A751A907979677B1ADE76E28A954B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:33:b7:cf:c5:54:10:81:a3:8d:52:9a:be:f8:
                    bc:ab:07:b0:51:72:9a:6b:4c:23:c9:82:f4:c7:ae:
                    c5:9a:8d:92:6e:46:11:bd:53:f9:da:72:28:1c:a7:
                    29:92:c1:4b:05:b2:24:b8:8f:5e:9c:4f:3b:56:12:
                    5f:e0:12:51:ee:ed:5f:47:4b:cf:d1:f9:28:77:d8:
                    50:56:84:59:6e:71:4d:71:5f:0d:cd:d5:a9:c6:ab:
                    1f:61:53:84:bf:e3:94:d0:17:52:92:27:8f:8f:83:
                    e5:05:35:94:da:78:52:ed:9e:1c:46:8a:bd:31:e6:
                    eb:be:43:36:3c:e3:c9:af:af:53:c0:36:9f:3f:fc:
                    c3:76:be:db:77:5a:55:66:41:91:d3:e5:b7:fc:25:
                    29:7b:00:7f:30:a8:37:4f:a1:e8:d9:8f:9b:c6:99:
                    e8:dc:7e:47:96:af:14:88:5d:e0:fc:af:82:4b:0e:
                    0e:58:41:cd:b0:b1:a6:78:cb:1f:1f:8b:48:5e:42:
                    1a:f0:a1:7f:df:17:9a:bb:f5:40:4f:96:4d:77:a8:
                    32:4a:fb:07:1d:8f:b8:3e:fe:03:13:14:1f:5c:13:
                    0c:fb:ad:ee:c8:20:aa:eb:cd:75:5e:23:42:40:07:
                    a4:5c:74:ec:71:ac:84:42:57:d5:21:bc:5d:bb:4f:
                    a6:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:57:92:69:D7:3A:75:1A:90:79:79:67:7B:1A:DE:76:E2:8A:95:4B
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/xleSadc6dRqQeXlnexreduKKlUs.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.75.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:a1:a4:e2:38:1b:83:b2:0f:0c:30:4e:68:f4:a4:2c:88:03:
         87:6a:12:0d:fd:50:b2:b2:2f:82:f4:13:4d:a2:be:48:98:0b:
         12:5a:d6:58:28:93:cd:23:cd:61:53:34:64:30:a4:d6:74:a8:
         7f:57:0f:46:e8:6b:c7:64:ab:31:1f:0b:d3:21:4d:f4:c4:a7:
         74:a7:4c:46:8a:2c:08:9e:cb:9c:ce:13:da:90:c4:0a:b5:3a:
         e7:b7:26:95:5c:90:be:df:30:9a:64:7d:16:e8:64:53:48:03:
         ae:a9:8c:9a:f0:8a:74:34:ae:c1:c0:be:de:81:58:7a:57:7a:
         4a:0f:ea:2b:58:f4:f6:e1:01:8f:88:04:47:d6:b5:de:a4:75:
         0d:bc:d7:26:1b:b1:66:eb:4a:cb:1c:41:98:d2:35:35:25:09:
         60:d2:dc:d4:53:90:e5:5a:0b:07:2c:87:ac:d6:7e:a7:16:74:
         24:6b:39:16:8d:73:34:a7:d6:0e:51:ac:cd:32:30:53:f6:75:
         cd:49:14:20:08:65:21:2b:ef:53:e1:6d:4e:48:8b:04:73:63:
         38:a5:c2:ff:e2:cd:65:c4:f5:15:a7:43:8e:73:ee:dc:52:d5:
         89:65:65:7e:a9:1d:ea:75:20:0e:f4:9b:ee:b5:c1:80:5a:2c:
         37:41:d9:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 22:24:58 2026 by rpki-client